TMS zl Management and Configuration Guide ST.1.1.100430

1-82
Overview
Default Operation
You can then access the Web browser interface or the CLI through SSH. The
default login settings for remote management access are:
■ Username = manager
■ Password = procurve
ProCurve recommends that you change the passwords as soon as possible.
Default Enabled Capabilities
By default, the TMS zl Module functions in routing mode. The following
capabilities are enabled:
■ IDS
• Protocol anomalies are detected with the default settings.
• The module does not perform signature-based detection until you
install the proper license and download the signatures.
• Threats are logged locally.
■ Firewall
The TMS zl Module denies all traffic except traffic that is allowed by
default policies. See “Default Firewall Policies” on page 1-82. However,
the module cannot control any traffic except traffic that is destined to
itself until you configure it as the router for that traffic.
■ VPN—The IPsec, L2TP, and GRE features are technically enabled but no
policies are configured to permit VPN tunnels to be established.
Default Firewall Policies
The TMS zl Module includes several default firewall access policies, which are
intended to allow routing protocols between routers in any zone and the TMS
zl Module (both unicast and multicast policies exist by default):
■ Internal-to-Self
• permit RIP any any
• permit OSPFIGP any any
■ External-to-Self
• permit RIP any any
• permit OSPFIGP any any
■ DMZ-to-Self
• permit RIP any any
• permit OSPFIGP any any